# CVEs published 2025-01-12

13 CVEs were published on January 12, 2025: 0 critical, 1 high. Days are UTC.

- [CVE-2025-0402](https://cve.now/CVE-2025-0402.md): 1902756969 reggie CommonController.java upload unrestricted upload (CVSS 5.3, 1902756969 reggie)
- [CVE-2025-0401](https://cve.now/CVE-2025-0401.md): 1902756969 reggie CommonController.java download path traversal (CVSS 6.9, 1902756969 reggie)
- [CVE-2025-0400](https://cve.now/CVE-2025-0400.md): StarSea99 starsea-mall update cross site scripting (CVSS 5.1, StarSea99 starsea-mall)
- [CVE-2025-0399](https://cve.now/CVE-2025-0399.md): StarSea99 starsea-mall uploadController.java UploadController unrestricted upload (CVSS 5.1, StarSea99 starsea-mall)
- [CVE-2024-42181](https://cve.now/CVE-2024-42181.md): HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability (CVSS 1.6, HCL Software DRYiCE MyXalytics)
- [CVE-2024-42180](https://cve.now/CVE-2024-42180.md): HCL MyXalytics is affected by a malicious file upload vulnerability (CVSS 1.6, HCL Software DRYiCE MyXalytics)
- [CVE-2024-42179](https://cve.now/CVE-2024-42179.md): HCL MyXalytics is affected by sensitive information disclosure vulnerability (CVSS 2.0, HCL Software DRYiCE MyXalytics)
- [CVE-2025-0398](https://cve.now/CVE-2025-0398.md): longpi1 warehouse Backend updateInport cross site scripting (CVSS 5.1, longpi1 warehouse)
- [CVE-2024-51456](https://cve.now/CVE-2024-51456.md): IBM Robotic Process Automation information disclosure (CVSS 5.9, IBM Robotic Process Automation)
- [CVE-2025-0397](https://cve.now/CVE-2025-0397.md): reckcn SPPanAdmin edit cross site scripting (CVSS 5.3, reckcn SPPanAdmin)
- [CVE-2025-0396](https://cve.now/CVE-2025-0396.md): exelban stats XPC Service shouldAcceptNewConnection command injection (CVSS 8.5, exelban stats)
- [CVE-2021-29669](https://cve.now/CVE-2021-29669.md): IBM Jazz Foundation cross-site scripting (CVSS 5.4, IBM Jazz Foundation)
- [CVE-2024-49785](https://cve.now/CVE-2024-49785.md): IBM watsonx.ai cross-site scripting (CVSS 5.4, IBM watsonx.ai)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.